Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/nZCsR9zMGFoabxGfNCZRgnVioRU.roa
File: nZCsR9zMGFoabxGfNCZRgnVioRU.roa (raw, json)
Hash identifier: tIg0KjDoNH39km50yuIGFMfpMNAphPFhY42awGuSKow=
Subject key identifier: 9D:90:AC:47:DC:CC:18:5A:1A:6F:11:9F:34:26:51:82:75:62:A1:15
Certificate issuer: /CN=733bda0008dfb5a2eb4e2a56902448fed940d59f
Certificate serial: 01825DF2193BC8E946DC90D5EFB659B6FD32
Authority key identifier: 73:3B:DA:00:08:DF:B5:A2:EB:4E:2A:56:90:24:48:FE:D9:40:D5:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czvaAAjftaLrTipWkCRI_tlA1Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/nZCsR9zMGFoabxGfNCZRgnVioRU.roa
Signing time: Tue 02 Aug 2022 09:45:23 +0000
ROA not before: Tue 02 Aug 2022 09:45:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 212.46.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5d:f2:19:3b:c8:e9:46:dc:90:d5:ef:b6:59:b6:fd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733bda0008dfb5a2eb4e2a56902448fed940d59f
Validity
Not Before: Aug 2 09:45:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d90ac47dccc185a1a6f119f342651827562a115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:fe:49:39:ab:17:3c:fd:01:79:1a:46:dd:
a9:ab:db:06:53:1d:96:a8:c4:15:10:2d:73:33:b8:
ec:7e:00:67:e0:e4:1a:d0:11:4c:cc:0d:3d:07:81:
f1:6f:fe:d2:d7:c3:10:03:96:97:ce:50:b6:a1:4c:
a0:54:b3:e2:4f:fd:25:6c:95:de:f6:27:fe:86:3d:
67:a1:cc:24:b9:8e:a9:24:c7:97:13:5c:66:50:5e:
5f:4c:7d:53:8a:f8:f9:cf:46:d2:0d:6c:b5:2b:8f:
75:b0:5a:49:57:e4:9b:2a:ea:05:a5:aa:3e:94:55:
b1:d8:4a:75:bd:70:d2:b5:06:a3:4e:f4:55:a1:f3:
79:8d:78:6f:68:e8:d5:50:2f:77:d1:da:67:34:cd:
77:c1:cf:70:f2:3d:dd:c0:9a:2f:25:08:28:29:8f:
b8:d4:0e:34:93:c2:e7:1a:0a:e9:11:9d:10:d9:14:
1e:bd:71:c5:6e:8b:0c:1b:63:63:aa:64:e8:59:6f:
9e:8c:27:6e:32:c6:3d:78:50:fe:fa:48:1a:80:05:
3b:44:be:08:f6:8d:8c:bb:da:09:3f:3c:63:ed:5a:
2e:3c:00:87:e4:23:c1:a1:a4:be:d0:b1:72:ab:f1:
4b:e7:6a:9b:d2:2f:26:2c:69:b7:0f:b5:c5:12:bd:
1c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:90:AC:47:DC:CC:18:5A:1A:6F:11:9F:34:26:51:82:75:62:A1:15
X509v3 Authority Key Identifier:
keyid:73:3B:DA:00:08:DF:B5:A2:EB:4E:2A:56:90:24:48:FE:D9:40:D5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czvaAAjftaLrTipWkCRI_tlA1Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/nZCsR9zMGFoabxGfNCZRgnVioRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/czvaAAjftaLrTipWkCRI_tlA1Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.33.0/24
Signature Algorithm: sha256WithRSAEncryption
24:97:97:18:61:ae:c9:cb:92:c7:fd:20:f3:ed:bf:1e:6d:cb:
b7:25:d7:45:c0:39:6d:ad:d5:ce:c2:4e:55:e3:bf:ee:60:d6:
f8:fb:53:76:21:07:9d:10:3e:e6:89:44:37:b4:4c:6c:e4:44:
d4:68:bd:c2:d5:6c:b4:19:1c:38:dc:21:0e:ab:7e:39:12:50:
aa:64:67:5d:54:aa:38:59:dc:f1:85:2f:fe:5e:e1:29:38:25:
3c:b3:bc:60:1e:be:16:d9:9f:d4:ec:49:37:a0:e9:c6:50:b6:
6b:26:2e:c5:60:cc:f7:95:a7:81:5f:71:e0:e6:e4:b3:9a:e6:
98:25:77:17:1a:61:66:0d:1a:a5:20:ef:f6:8c:74:d8:1a:e0:
4d:90:14:f3:c5:42:ac:38:7d:85:ff:63:02:91:5e:db:3a:71:
4f:13:c2:81:52:d6:43:86:d7:be:80:5f:42:1c:53:55:b1:5b:
39:87:95:d2:d6:24:8b:22:a5:d0:90:f4:2b:17:a5:f8:f5:59:
4a:64:94:a8:dc:bc:6b:de:ee:22:b5:65:ca:b9:77:95:22:2e:
4e:ea:06:0b:52:e6:5c:42:ac:f3:32:db:ff:85:55:e9:78:51:
cb:ec:f9:28:9e:c3:13:41:76:7a:53:61:2e:1e:1d:5f:28:02:
ca:12:a8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:23 2025 by rpki-client